This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File:                     pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier:          In9hGkFQN009pXzqtWHDrG9kWjW3m/zqBZMzKGbxVbY=
Subject key identifier:   BF:40:B4:83:B0:39:FC:2D:3C:F3:BE:5A:7B:77:E1:D1:A7:0E:1E:4C
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer:       /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number:          AA
Signing time:             Sun 25 Jan 2026 05:22:35 +0000
Manifest this update:     Sun 25 Jan 2026 05:22:35 +0000
Manifest next update:     Sun 01 Feb 2026 05:22:35 +0000
Files and hashes:         1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: dXda/q3RdIfA6edKMmalXdr/gTv4IPfkOiKWKIpEmbc=)
                          2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
        Validity
            Not Before: Jan 25 05:22:35 2026 GMT
            Not After : Feb  1 05:22:35 2026 GMT
        Subject: CN=6975a89b-0938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:75:34:d1:18:0b:6c:99:18:4d:49:5b:8f:
                    f5:d7:7d:93:a7:e4:72:78:41:73:ba:7a:9c:bb:cd:
                    77:ba:fe:e6:06:52:ff:05:b9:d6:23:bf:1f:3c:c2:
                    da:3e:d7:56:2b:99:b3:08:1e:d7:c2:fc:8b:c9:44:
                    8d:15:ed:08:f9:79:b8:bd:70:47:a7:31:38:ed:85:
                    88:60:7e:f9:b1:e2:33:7b:21:a8:a9:b7:fe:f5:36:
                    15:8b:3b:d1:22:19:d7:92:77:97:e9:59:ec:a2:27:
                    ac:d3:63:ba:86:39:09:7d:b7:a8:d1:53:53:1c:f4:
                    b6:a4:af:d9:5b:1a:6e:fb:bf:68:e3:81:94:23:09:
                    ed:7c:4c:18:ba:e9:96:27:f7:82:ca:1b:46:cc:fc:
                    11:2b:d6:d3:f6:72:71:91:c5:c6:5b:1c:17:b1:d3:
                    2e:31:3f:61:c0:45:6b:39:d7:ce:ca:16:a8:87:ac:
                    e6:c0:1d:8c:74:96:21:e7:fb:ce:5b:5a:cc:ea:22:
                    f1:85:57:84:09:59:10:87:7d:02:ae:82:aa:21:cf:
                    83:18:71:ee:1e:db:48:80:b4:3b:b7:03:3a:f7:cf:
                    90:af:44:d7:4e:12:d6:66:07:26:30:ea:6c:e1:cc:
                    3b:1e:de:17:b1:16:6d:30:81:f4:bd:bd:87:ae:20:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:40:B4:83:B0:39:FC:2D:3C:F3:BE:5A:7B:77:E1:D1:A7:0E:1E:4C
            X509v3 Authority Key Identifier:
                keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:1e:b5:da:31:68:19:c1:29:f8:f6:0f:39:12:c7:b2:50:
         01:47:aa:f6:51:f9:c8:c1:94:8f:a6:b0:fb:09:d9:6a:59:2e:
         6b:2b:b5:31:7a:95:bc:6f:2a:25:7d:49:21:93:fd:eb:0b:a4:
         48:d6:be:85:22:25:24:1a:6c:f5:fa:5c:a6:83:5d:5a:0f:1d:
         77:d9:53:4a:a3:67:3e:f4:f0:ec:1e:e6:7a:a8:4a:c0:01:b9:
         9a:6c:c7:2f:7c:b8:22:00:b0:54:22:00:a2:e5:10:5d:c8:1b:
         50:80:3b:49:72:43:d8:e2:f7:bd:36:94:69:83:df:6a:c0:34:
         61:16:50:b3:e7:f2:53:ee:f9:19:71:7e:f0:e7:88:b6:1c:73:
         1c:90:83:58:68:e1:37:e5:3f:e4:15:15:52:0e:0e:72:3a:d4:
         dd:c0:cf:9e:75:fb:af:e4:07:35:42:b4:b1:f1:d2:5b:f6:69:
         2a:dc:4c:e8:39:f1:e2:b8:39:68:74:b0:a1:a1:b1:7c:57:bf:
         b1:5a:d7:2f:c5:29:30:3e:16:c6:6a:d3:25:4b:a1:b9:0e:6b:
         27:50:13:41:3b:33:a4:58:86:b7:ff:98:d2:8a:46:25:4a:8e:
         c1:da:89:bf:0e:9c:2f:14:00:b7:41:9f:a8:fc:e8:02:98:5f:
         89:7a:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:45:25 2026 by rpki-client